The vulnerability is a memory leak in the Linux kernel’s DRM/xe subsystem that occurs when xe_dma_buf_init_obj() fails to free a pre‑allocated buffer object (BO) created by drm_gpuvm_resv_object_alloc(). The lost BO is not released and accumulates over time, gradually exhausting kernel memory and potentially causing a denial‑of‑service. This weakness maps to CWE‑401 (Memory Leak) and CWE‑772 (Missing Release of Resource).

Affected systems are Linux kernel builds that include the DRM/xe driver before the fix commit 78a6c5f899f22338bbf48b44fb8950409c5a69b9. All standard Linux kernels older than that commit, irrespective of vendor or distribution, contain the flaw. The patch is already present in newer kernels, such as those released after the commit and in the 7.1‑rc1 kernel in development.

The CVSS score of 5.5 indicates medium severity and the EPSS score of <1% signals a very low likelihood of exploitation. The flaw is not listed in CISA KEV, implying no publicly known exploit. Exploitation requires triggering the DRM DMA buffer initialization path, which is generally limited to privileged users or processes with Cap_SYS_ADMIN. Based on the description, it is inferred that the attack vector is local; a remote attacker would first need to gain privilege escalation. The eventual abuse leads to gradual kernel memory exhaustion that could reboot the system or cause a denial of service.